`pam_limits.so` 是否像命令一样使用？

Question

来自http://man7.org/linux/man-pages/man8/pam_limits.8.html

概要顶部

   pam_limits.so [conf=/path/to/limits.conf] [debug] [set_all]
                 [utmp_early] [noaudit]

概要是否建议将pam_limits.so其用作命令名称？

或者是pam_limits.so一个模块，它可以像任何其他模块一样加载和卸载吗？

谢谢。

Answer 1

No, the pam_*.so modules are shared libraries:

/lib/x86_64-linux-gnu/security# file pam_limits.so 
pam_limits.so: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV),
dynamically linked, BuildID[sha1]=..., stripped

And the ones on my Ubuntu system don't even have the x bits set. Since they're technically ELF files, you can try to run them, but it doesn't really work:

/tmp$ chmod +x pam_limits.so 
/tmp$ ./pam_limits.so 
Segmentation fault

They're loaded by the PAM libraries, based on the configuration in /etc/pam.d/. The modules can be given arguments there, e.g.:

session       required   pam_env.so readenv=1 envfile=/etc/default/locale

The man page just documents the options that can be used here.